Change logs for Rudder 6.2

[Private] Rudder 6.2.20 (2022-10-12)

Changes

This version is only available for extended support subscription

Generic methods

  • Add documentation for package_present update cache (#21412)

Bug fixes

Security

  • Fixed: CVE in Jetty 9.4.32 Rudder 6.2 (#21888)

  • Fixed: CVE in nuprocess 2.03 and below (#21893)

Agent

  • Fixed: When cf-serverd starts it can kill an unrelated process (#21100)

  • Fixed: rudder agent check may not restart cf-execd if an agent is frozen (#21774)

Web - UI & UX

  • Fixed: Unable to sort on property in list of nodes tab (#21503)

Architecture - Dependencies

  • Fixed: Update scala-lib version due to CVE2022-36944 (#21869)

Architecture - Internal libs

  • Fixed: Syntax errors in scala files (#21748)

Release notes

This is a bug fix release in the 6.2 series and therefore all installations of 6.2.x should be upgraded when possible. When we release a new version of Rudder it has been thoroughly tested, and we consider the release enterprise-ready for deployment.

[Private] Rudder 6.2.19 (2022-09-05)

Changes

This version is only available for extended support subscription

Bug fixes

Web - Config management

  • Fixed: missing list of inpacted rules when creating a directive and applying it to a rule (#21671)

API

  • Fixed: API documentation on how to query node is invalid (#21690)

Web - UI & UX

  • Fixed: rollback button in even log can be clicked several time in a row and error are stacked in other screens (#21429)

Release notes

This is a bug fix release in the 6.2 series and therefore all installations of 6.2.x should be upgraded when possible. When we release a new version of Rudder it has been thoroughly tested, and we consider the release enterprise-ready for deployment.

[Private] Rudder 6.2.18 (2022-08-31)

Changes

This version is only available for extended support subscription

Bug fixes

Web - UI & UX

  • Fixed: Delete group category popup and directive creation popup are not closing (#21666)

Release notes

This is a bug fix release in the 6.2 series and therefore all installations of 6.2.x should be upgraded when possible. When we release a new version of Rudder it has been thoroughly tested, and we consider the release enterprise-ready for deployment.

Rudder 6.2 is currently a maintained version of Rudder.

Rudder 6.2.17 (2022-08-25)

Changes

Security

  • Skip CVE-2022-31197 in checks (#21602)

Bug fixes

Web - UI & UX

  • Fixed: when validating change in directive, a popup appear, but the background is only half grayed out (#18575)

  • Fixed: Filter in URL doest work on tab list of nodes (#21558)

Relay server or API

  • Fixed: Unsoundness in "owning_ref" (#21538)

Web - Technique editor

  • Fixed: Cannot delete technique in the technique editor if it contains a space in its name (#21491)

System integration

  • Fixed: Correct BOM file in ps1.st used in test (#21498)

Web - Config management

  • Fixed: Concurrent delete of policy backup directory can lead to useless error (#21482)

Documentation

  • Fixed: improve contributing doc to state how to generate inventories (#21476)

Generic methods

  • Fixed: rudder agent run man git-stash (#21525)

Release notes

This is a bug fix release in the 6.2 series and therefore all installations of 6.2.x should be upgraded when possible. When we release a new version of Rudder it has been thoroughly tested, and we consider the release enterprise-ready for deployment.

Rudder 6.2.16 (2022-07-26)

Changes

Bug fixes

Security

  • Fixed: Update embedded openssl to 1.1.1q (#21360)

  • Fixed: URL with "%3B" (ie ';') leads to a stacktrace (#21463)

  • Fixed: JSESSIONID cookie should have a SameSite policy (#21445)

Performance and scalability

  • Fixed: API to fetch nodes + software times out on large instance (#21241)

Web - Compliance & node report

  • Fixed: In HTTPS mode, we may have errors in logs about duplicate messages that are totally legit (#21352)

Agent

  • Fixed: Deprecation warning with package methods on Ubuntu 22.04 LTS (#21206)

Release notes

This is a bug fix release in the 6.2 series and therefore all installations of 6.2.x should be upgraded when possible. When we release a new version of Rudder it has been thoroughly tested, and we consider the release enterprise-ready for deployment.

Rudder 6.2.15 (2022-06-28)

Changes

Bug fixes

Packaging

  • Fixed: parsing of system fusioninventory is invalid (#21211)

Web - Nodes & inventories

  • Fixed: Using '{' in node property lead to error (#21322)

Relay server or API

  • Fixed: Allow .ocs files as inventory (#21270)

  • Fixed: Missing encoding of postgresql password (#21203)

  • Fixed: Query seems to be ignored for pendings nodes (#20281)

Security

  • Fixed: Ignore CVE CVE-2022-22978 that will not be fixed in 6.1/6.2 dependencies (#21263)

Architecture - Internal libs

  • Fixed: Query string is not correctly parsed in test API framework (#21253)

Web - Technique editor

  • Fixed: When a technique is not in the active techique tree, it can’t be deleted in editor (#21119)

Web - UI & UX

  • Fixed: Missing icon in technical logs for error messages (#18918)

Generic methods

  • Fixed: The mustache template examples in our documentation do not respect the mustache standard (#21286)

Release notes

This is a bug fix release in the 6.2 series and therefore all installations of 6.2.x should be upgraded when possible. When we release a new version of Rudder it has been thoroughly tested, and we consider the release enterprise-ready for deployment.

[Private] Rudder 6.2.14 (2022-06-01)

Changes

This version is only available for extended support subscription

Bug fixes

Documentation

  • Fixed: Fix the relayd logging documentation (#20985)

Miscellaneous

  • Fixed: Document that port 5309 can be disable in node configuration (#20982)

CI

  • Fixed: Race condition between elm builds (#21156)

  • Fixed: Ci does not properly clean its test files (#21178)

  • Fixed: Improve cleanup of root-owned files in tests (#21130)

Security

  • Fixed: security checks fails because of request to sonatype oss index (#21179)

  • Fixed: Fix some cve in dependencies (#21169)

  • Fixed: Ignore some CVE that cannot be fixed in 6.1 branch (#21103)

  • Fixed: Ignore some CVE that cannot be fixed in 6.1 branch (#21103)

  • Fixed: Don’t display oauth/oidc client secret in logs (#21077)

  • Fixed: Ignore CVEs for spring-ldap-core (#21027)

  • Fixed: Update spring and logback version because of new CVE (#21022)

Web - Nodes & inventories

  • Fixed: Criteria not working when filter on IP adress and GoupID in group page (#21144)

  • Fixed: Sometime inventory processing is not done when inventory is receveived (#19585)

  • Fixed: List of nodes by version does not include windows nodes (#17728)

  • Fixed: Two same envvar modulo a space at begining of name leads to LDAP error when saving inventory (#20984)

API

  • Fixed: Rudder incorectly parse URL with a '+' in the path into spaces (#20943)

  • Fixed: Update api doc tool chain (#21073)

  • Fixed: Generation not started when modifying authorized network via API (#20979)

Performance and scalability

  • Fixed: The way groups are fetched when responding to API compliance is inefficient (#21028)

Techniques

  • Fixed: wrong spelling of wily in apt package manager settings (#21113)

Generic methods

  • Fixed: multiple calls to file_from_template_jinja2 in audit fails (#20913)

Release notes

This is a bug fix release in the 6.2 series and therefore all installations of 6.2.x should be upgraded when possible. When we release a new version of Rudder it has been thoroughly tested, and we consider the release enterprise-ready for deployment.

Rudder 6.2.13 (2022-04-08)

Changes

Documentation

  • Windows support should be documented as the other agents (#20835)

  • Add a compatibilty table for agent relay server in the documentation (#20621)

  • Document how to automatically synchronize technique resources from an external repository (#20495)

Architecture - Internal libs

  • Add name for spring security main auth configuration bean to be used by oauth2 (#20886)

Web - Nodes & inventories

  • kernel version doesn’t show in the node page (#20721)

Techniques

  • Reformat all the statements in userManagement technique (#20878)

CI

  • Dockerize technique tests (#20386)

Generic methods - File Management

  • Improve File from HTTP server method documentation (#20810)

Bug fixes

Packaging

  • Fixed: rudder-webapp requires rsync to build for RHEL (#20974)

  • Fixed: rudder-agent-postinst doesn’t close file descriptors anymore (#20522)

  • Fixed: Separate openldap cache between nightly and release builds - 6.2 (#20450)

  • Fixed: Update openssl to 1.1.1m (#20428)

Agent

  • Fixed: Lower the log level of the "Skipping adding class […​] as its name is equal or longer than 1024" message (#20960)

  • Fixed: Improve agent-side messages when download is refused (#20521)

Security

  • Fixed: Update embedded openssl to 1.1.1n (#20894)

  • Fixed: Update jdbc postgres driver to 4.2.25 for CVE-2022-21724 (#20969)

  • Fixed: Vulnerability in the regex crate (#20872)

  • Fixed: Data race in thread-local relayd dependency (#20639)

  • Fixed: Update spring-core (#20571)

  • Fixed: Use a proper CSPRNG to generate API tokens (#20512)

Documentation

  • Fixed: Correct doc on windows KB update (#20891)

  • Fixed: backup/restore doc is incomplete (#20888)

  • Fixed: Documentation about properties usage on windows node uses an incorrect syntax (#20731)

  • Fixed: apt-key is deprecated (#20518)

  • Fixed: API : URL ending with / are seen like /[empty string parameter] (#3881)

  • Fixed: Add a complex example of node search API request (#20577)

  • Fixed: documentation of method schedule_ is broken (#20605)

Miscellaneous

  • Fixed: Show more details in exception when parsing an invalid technique version (#20976)

  • Fixed: Update spring to 5.2.20 to fix CVE-2022-22965 (#20972)

  • Fixed: Update spring to 5.2.20 to fix CVE-2022-22965 (#20972)

  • Fixed: Compilation warning on branche 6.2 (#20874)

  • Fixed: In 6.2.10 the plugin can not uninstall itself in some cases (#20392)

Web - Config management

  • Fixed: Starting policy generation by hand fails if node-configuration-hashes.json (#20926)

Web - Technique editor

  • Fixed: When editing files with the technique editor resources manager, newlines at the end of file are trimmed (#19319)

  • Fixed: Suppressed techniques coming back to life forever (#19006)

API

  • Fixed: Broken allowed network curl example (#20844)

  • Fixed: No clear error message when calling api with curl and data are not url-encoded (#10915)

  • Fixed: State is missing from node api (#20582)

  • Fixed: It is impossible to read group properties with a read-only account (#20567)

  • Fixed: Compliance api miss audit state (#20531)

Architecture - Internal libs

  • Fixed: Duplicate classes RudderUserDetails (#20734)

CI

  • Fixed: Don’t skip tests in webapp publish (#20812)

  • Fixed: Missing clean in webapp publish (#20772)

Performance and scalability

  • Fixed: Improve dynamic group computation speed and fix inverted searched (#20716)

  • Fixed: We are recreating ldap object while we could duplicate them, leading to suboptimal perf (#20535)

Web - Nodes & inventories

  • Fixed: List of directive for the pending node is invalid (#20736)

Web - Compliance & node report

  • Fixed: when there’s a disabled directive in a rule, it’s really hard to see (#18672)

  • Fixed: when there’s a disabled directive in a rule, it’s really hard to see (#18672)

  • Fixed: Compliance bar of a node with no policy applied is red / error 100% (#20558)

  • Fixed: error on system status tabs when there are missing reports (#20474)

Architecture - Dependencies

  • Fixed: Update xerces version (#20676)

Techniques

  • Fixed: post hook for copyGitFile on windows don’t report (#20909)

  • Fixed: Unexpected reporting in userManagement in audit when user is not present (#19427)

  • Fixed: Patch dsc techniques according to #20830 (#20832)

  • Fixed: SNMP installation uses deprecated package method, and it reports an error even though it works (#16694)

  • Fixed: Confusing log message in cron technique hook (#20515)

Generic methods

  • Fixed: Variable string from command fails when command contains control structures (#20128)

  • Fixed: All classes manipulations are ineffeccient because there are repeated 3 times (#20885)

  • Fixed: No report from sysctl generic method (#20612)

Release notes

Special thanks go out to the following individuals who invested time, patience, testing, patches or bug reports to make this version of Rudder better:

  • I C

This is a bug fix release in the 6.2 series and therefore all installations of 6.2.x should be upgraded when possible. When we release a new version of Rudder it has been thoroughly tested, and we consider the release enterprise-ready for deployment.

Rudder 6.2.12 (2021-12-17)

Changes

Documentation

  • Add debian 11 server support to documentation (#20379)

  • Update supported platform list in documentation (#20125)

  • Document windows update technique (#20265)

  • Dockerify api-doc test, build and publication (#20272)

CI

Relay server or API

  • Add relayd man page build to Jenkinsfile (#20327)

System techniques

  • It’s not possible to make the agent listen on a specific interface (#20113)

Bug fixes

Security

  • Fixed: Do not display the jetty version number (#19163)

  • Fixed: Upgrade logback version for LOGBACK-1591 / JNDI (#20421)

Packaging

  • Fixed: rudder-webapp 6.2 on debian11 generate a dbgsym package (#20376)

Web - UI & UX

  • Fixed: Upgrade jquery to 3.6.0 (#20430)

Relay server or API

  • Fixed: Query seems to be ignored for pendings nodes (#20281)

  • Fixed: Vulnerability in tokio (#20269)

Architecture - Dependencies

  • Fixed: Rudder build when skipping tests (#20410)

Web - Config management

  • Fixed: Non system technique appears in "System status tab" (#20383)

Performance and scalability

  • Fixed: Improve performance of getUserAndSystemNodeStatusReports by exploring only once cache (#20318)

  • Fixed: Improve performance of getUserAndSystemNodeStatusReports by exploring only once cache (#20318)

  • Fixed: Method getByRulesCompliance used by API is highly inefficient (#20310)

  • Fixed: Method getByRulesCompliance used by API is highly inefficient (#20310)

  • Fixed: Method getByRulesCompliance used by API is highly inefficient (#20310)

  • Fixed: Method getByRulesCompliance used by API is highly inefficient (#20310)

  • Fixed: spurious "connection_read(9): no connection!" in /var/log/rudder/ldap/slapd.log (#19980)

Miscellaneous

  • Fixed: Mount elm tmp dir in tmpfs to avoid lock failure on concurrent builds (#20361)

  • Fixed: Rudder agent factory-reset don’t regenerate inventory (#20282)

CI

  • Fixed: Rudder-pkg tests timeout sometimes (#20354)

  • Fixed: Only run compatibility tests during the night (#20323)

  • Fixed: Split test and build tasks in Jenkins file (#20320)

  • Fixed: Dockerify tests (#20275)

Release notes

This is a bug fix release in the 6.2 series and therefore all installations of 6.2.x should be upgraded when possible. When we release a new version of Rudder it has been thoroughly tested, and we consider the release enterprise-ready for deployment.

Rudder 6.2.11 (2021-11-19)

Changes

CI

  • Change the slack notification form the ncf tests (#20143)

Bug fixes

Packaging

  • Fixed: ubuntu 13 doesn’t support tlsv1.2 (#20122)

  • Fixed: File /tmp/rudder-plugins-upgrade is never cleaned during an upgrade, so running again rudder-upgrade causes trouble on plugins (#20069)

  • Fixed: old distro build fail to get source (#20063)

  • Fixed: error at upgrade of rudder to 7.0 (#20031)

Documentation

  • Fixed: Documentation about collection access in jinja2 template is incorect (#20234)

Performance and scalability

  • Fixed: Improve compliance computation efficiency (#20254)

  • Fixed: Store processes of an inventory after storing the inventory (#20006)

Web - UI & UX

  • Fixed: "Save changes" button on the policy mode form is broken. (#20210)

Relay server or API

  • Fixed: Vulnerability in chrono (#20160)

  • Fixed: Vulnerability in time crate (#20141)

Web - Maintenance

  • Fixed: Error when unserializing ChangeRequest modifying Directives based on Techniques that have been deleted (#3783)

Web - Nodes & inventories

  • Fixed: confusing search option for Node: "Policy Node ID" (#20093)

  • Fixed: Number of CPU is wrongly reported (#19988)

Web - Config management

  • Fixed: Typo in log "deletedbut" (#19956)

Techniques

  • Fixed: sshKeyDistribution doesn’t correctly reports on missing home folder (#19944)

Generic methods

  • Fixed: Pass the zypper_pattern test in staging (#20108)

  • Fixed: Fix augeas methods documentation (#19883)

  • Fixed: testinfra based tests should pass via the python executable and not py.test (#20001)

  • Fixed: Strict mode of file_key_value_present_option does not introduce unwanted escpaing characters (#19908)

CI

  • Fixed: Remove ubuntu20 from the Jenkinsfile test since thehost is unstable atm (#20056)

  • Fixed: Cover all supported server OS in the PR automated tests. (#19979)

  • Fixed: Add ncf tests to the repo Jenkinsfile (#19970)

Release notes

This is a bug fix release in the 6.2 series and therefore all installations of 6.2.x should be upgraded when possible. When we release a new version of Rudder it has been thoroughly tested, and we consider the release enterprise-ready for deployment.

Rudder 6.2.10 (2021-09-03)

Changes

Packaging

  • Optimize ldap binaries with -O2 (#19648)

Documentation

  • Document the agent.conf format for windows (#19673)

Techniques

  • All .cf and .st files under in rudder-techniques should have an updated license header (#19534)

Bug fixes

Packaging

  • Fixed: debian 8 fails to build augeas (#19906)

  • Fixed: Update openssl to 1.1.1l (#19854)

  • Fixed: Fail on elm build error (#19689)

Documentation

  • Fixed: Document that a "rudder agent server-keys-reset" is necessary to move a node to another policy server (#19761)

  • Fixed: Wrong procedure for import of configuration (#19712)

  • Fixed: Document more precisely versioning scheme (#19474)

System integration

  • Fixed: Git error when deleting a node or archiving everything, and very slow git (#19398)

  • Fixed: Rudder fails to stop on boot error (#19567)

Performance and scalability

  • Fixed: Display result of search with thousands of nodes is really slow on 6.2 & 7.0 (#19897)

Miscellaneous

  • Fixed: Error about cfengine key when deleting a node (#19571)

  • Fixed: NoSuchFileException: /var/rudder/policy-generation-info/node-configuration-hashes.json (#19589)

  • Fixed: Add Kali Linux to the list of recognized OS (#19537)

Plugins integration

  • Fixed: rudder package does not print the plugin content at install time (#19874)

  • Fixed: Format the rudder-pkg python files (#19886)

Relay server or API

  • Fixed: Data race in crossbeam-deque (#19833)

  • Fixed: Relayd deadlocks when trying to forward a shared-file (#19547)

  • Fixed: Prevent race condition in relayd tests (#19569)

Architecture - Internal libs

  • Fixed: RunNuCommandTest fails with timeout on CI (#19828)

Security

  • Fixed: Two vulnerabilities in hyper (#19731)

Web - Nodes & inventories

  • Fixed: Incorrect pattern matching leads to error in inventory parsing (#19632)

Web - Config management

  • Fixed: It is impossible to read properties with a read-only account (#19631)

  • Fixed: Can’t access filesystem type from group criteria (#19559)

Release notes

Special thanks go out to the following individuals who invested time, patience, testing, patches or bug reports to make this version of Rudder better:

  • GaĆ«tan Chagneau

This is a bug fix release in the 6.2 series and therefore all installations of 6.2.x should be upgraded when possible. When we release a new version of Rudder it has been thoroughly tested, and we consider the release enterprise-ready for deployment.

Rudder 6.2.9 (2021-07-20)

Changes

Bug fixes

Miscellaneous

  • Fixed: Or selector for property Name=Value selector returns 0 elements (#19538)

Documentation

  • Fixed: Correctly name LICENSES folder in repo (#19535)

Security

  • Fixed: CVE in jsonpath dependency (#19530)

Release notes

This is a bug fix release in the 6.2 series and therefore all installations of 6.2.x should be upgraded when possible. When we release a new version of Rudder it has been thoroughly tested, and we consider the release enterprise-ready for deployment.

Rudder 6.2.8 (2021-07-09)

Changes

Packaging

  • Add debian 11 build flags to 6.2 (#19391)

  • Add ci checks for packages (#19362)

  • Improve pylint config and add formatter to rudder-pkg (#19441)

  • rudder-pkg test should use python3 (#19405)

  • Backport typos checks to 6.1 (#19359)

  • Clean workspace at the end of Rust builds (#19246)

  • Clean workspace at the end of Rust builds (#19246)

  • Add ci check for techniques (#19355)

  • Add ci checks on rudder-agent repo (#19354)

Documentation

  • Missing doc about methods ordering (#19462)

  • Add ci check for typos in docs (#19360)

Bug fixes

Plugins integration

  • Fixed: when upgrading rudder, plugins are upgraded, but are disabled (#19517)

Packaging

  • Fixed: No more need for insserv-compat as all our services are systemd units (#19509)

  • Fixed: Broken agent postinst script (#19406)

  • Fixed: Broken short hostname in agent certificate (#19447)

  • Fixed: Api doc publish does not require docs label (#19408)

Agent

  • Fixed: rudder-agent-postinst fails in 7.0 while closing fd (#19429)

  • Fixed: Rudder agent check should check if certificate matches private key (#19392)

Documentation

  • Fixed: Outdated doc for setting limit of open files for the webapp (#19494)

  • Fixed: Remove wrong doc about services passwords (#19493)

  • Fixed: Fix docs about HTTPS reporting in non-compliant mode (#19437)

  • Fixed: Update Ansible integration link to Rudder inventory script (#19420)

  • Fixed: Document minimum version of JDK (8u92) (#19280)

  • Fixed: Missing 'settings' layer in the allowed_networks API doc (#19502)

  • Fixed: Add name to LDAP pool to help debugging (#19284)

  • Fixed: Improve augeas set method (#19260)

Security

  • Fixed: Lack of HTML escaping in nodes list (#19456)

  • Fixed: Vulnerability in spring-security (#19503)

  • Fixed: Enforce stricter restriction on authorized node id and hostname (#19457)

  • Fixed: Command injection in plugins repository file names (#19442)

  • Fixed: CVE in spring dependency (#19407)

  • Fixed: Update snakeyaml dependency for security (#19400)

  • Fixed: rudder.auth.admin.pass should be stored in bcrypt format (#19308)

  • Fixed: Ignore security alert for unused js embeded in scala lib (#19272)

Web - UI & UX

  • Fixed: Directive details display is broken if the name of a directive is too long. (#19487)

Performance and scalability

  • Fixed: Inefficient comparision of strings in Rudder (#19467)

  • Fixed: Improve NodeInfo cache (#19399)

  • Fixed: Move use of cache outside of semaphore in NodeInfoService (#19396)

  • Fixed: Semaphore on Nodeinfoservice is not working (#19351)

Relay server or API

  • Fixed: Prevent parameter option injection in remote run (#19455)

  • Fixed: relayd on relays fails to retry inventories upload (#19375)

System techniques

  • Fixed: Missing cleanup of /var/rudder/reports/failed (#19435)

Web - Config management

  • Fixed: Inventory with updated properties doesn’t always start a policy generation (#19414)

  • Fixed: Semaphore in APIAccountRepository,GitArchiverUtils and maybe PolicyServerManagementService are not semaphoring (#19363)

Web - Nodes & inventories

  • Fixed: When a node is totally deleted, cache in NodeInfoService can’t know about it (#19394)

  • Fixed: In inventory, if there are two "rudder" tag, uuid are concatenated (#19305)

  • Fixed: Error when processing old inventories with davfs temporary files (#19268)

API

  • Fixed: Info API is not documented (#19395)

  • Fixed: API shows only part of the memory information (#19374)

  • Fixed: Remove reference to x-www-form-urlencoded in API commands (#19276)

System integration

  • Fixed: Confusing message when we disable non-compliant-report log (#19381)

Techniques

  • Fixed: Policy validation at the end of policy generation spends too much time evaluating things (#19477)

  • Fixed: File content always reports repair when "Replace content" is selected (#19445)

  • Fixed: Invalid reporting in file content technique (#19431)

  • Fixed: User technique should show unix option by default (#19403)

  • Fixed: cron management doesn’t support multiline entry correctly (#19336)

  • Fixed: When configuring a comment in ssh key in technique ssh key distribution, 6 spaces are added at start of comment line (#19335)

  • Fixed: User Management technique tries to always change user gid when forcing the check of user gid everytime (#19269)

  • Fixed: Group management technique doesn’t correctly honor gid option (#19266)

CI

  • Fixed: Hardcod the output of the style test TestClassPrefix in success cases (#19404)

  • Fixed: Add typos check to CI config (#19343)

  • Fixed: Force pylint3 instead of pylint in qa-test (#19390)

Release notes

Special thanks go out to the following individuals who invested time, patience, testing, patches or bug reports to make this version of Rudder better:

  • Lars Koenen

This is a bug fix release in the 6.2 series and therefore all installations of 6.2.x should be upgraded when possible. When we release a new version of Rudder it has been thoroughly tested, and we consider the release enterprise-ready for deployment.

Rudder 6.2.7 (2021-05-18)

Changes

Packaging

  • Improve script linter in rudder repo (#19243)

  • Improve script linter in rudder repo (#19243)

  • Set CVSS limit for failing webapp dependency check (#19214)

  • Add maven deploy task to pipeline (#19197)

  • Add scripts to setup Rust build environements in CI (#19184)

Miscellaneous

  • Improve linter and test configuration (#19177)

Bug fixes

Generic methods - File Management

  • Fixed: The Generic Method "File copy from Rudder shared Folder" ignores Audit policy mode (#19144)

  • Fixed: Condition is ignored after "File from remote template" (#19212)

Packaging

  • Fixed: Shared file broken on upgraded servers with SELinux enabled (#19188)

  • Fixed: Update reflections to remove vulnerable guava dependency (#19216)

  • Fixed: Allow building without sccache (#19225)

  • Fixed: postinstall fails on machines with long hostname (#19185)

Web - Config management

  • Fixed: Empty /var/rudder/policy-generation-info/node-configuration-hashes.json after a policy generation that changed nothing (#19248)

  • Fixed: AUTHORIZED_NETWORKS system variable must be multivalued (#19217)

Miscellaneous

  • Fixed: relay package fails to build on rhel7 (#19247)

  • Fixed: API documentation is missleading for properties (#19202)

  • Fixed: Policy generation does change technique resource files when it should not (#19222)

  • Fixed: setting a job with schedule_simple in catchup mode does not honor the schedule (#19227)

API

  • Fixed: Undocumented API rudder_verify_certificates (#19235)

  • Fixed: Missing documentation for POST allowedNetwords API (#18506)

Security

  • Fixed: Check dependence fails with NPE (#19231)

Web - UI & UX

  • Fixed: Date picker in search (last inventory) is broken (#19228)

Performance and scalability

  • Fixed: Slow computation of dynamic groups on large system (#18981)

  • Fixed: backup file are not copied correctly when the destination directory is on another FS (#19218)

  • Fixed: Put node cache info into a file in place of LDAP (#19213)

Architecture - Dependencies

  • Fixed: Some java dependencies have security warning and should be updated (#19211)

Web - Technique editor

  • Fixed: Techniques using a condition containing a variable are not canonified correctly with dsc agent (#19199)

Web - Compliance & node report

  • Fixed: Webapp tests fail if repository path contains an '@' (#19186)

Plugins management

  • Fixed: Detection of dependencies for plugin can fail if the python lib of another distrib is present (#19187)

Agent

  • Fixed: Command "rudder agent policy-server <server ip>" return code = 1 when ok (#19157)

  • Fixed: cannot upgrade directives because curl checks certificates (#19175)

Release notes

Special thanks go out to the following individuals who invested time, patience, testing, patches or bug reports to make this version of Rudder better:

  • Jean Cardona

  • Axel Bouet

  • Lars Koenen

This is a bug fix release in the 6.2 series and therefore all installations of 6.2.x should be upgraded when possible. When we release a new version of Rudder it has been thoroughly tested, and we consider the release enterprise-ready for deployment.

Rudder 6.2.6 (2021-04-21)

Changes

Bug fixes

Miscellaneous

  • Fixed: Syntax error in rudder-upgrade (#19172)

Web - Config management

  • Fixed: Lots of files are created in /var/rudder/inventories/debug (#19171)

Release notes

This is a bug fix release in the 6.2 series and therefore all installations of 6.2.x should be upgraded when possible. When we release a new version of Rudder it has been thoroughly tested, and we consider the release enterprise-ready for deployment.

Rudder 6.2.5 (2021-04-21)

Changes

Security

  • Use https repos in maven config (#19164)

Packaging

  • Split cargo-deny from qa-test (#19083)

Bug fixes

Plugins integration

  • Fixed: Error when restoring plugin status on fresh server install (#19125)

Packaging

  • Fixed: Update openssl to 1.1.1k (#19090)

  • Fixed: Vulnerability in relayd dependencies diesel and generic-array (#19087)

Documentation

  • Fixed: Incorrect option in pg_restore for archive (#19036)

Plugins management

  • Fixed: when we install a plugin, if the dependency (package manager) is not met, it still tries to install it and fails (#18999)

Web - Config management

  • Fixed: Cannot load file browser if subfolders of the shared-folder contain dead symlinks (#19158)

  • Fixed: Add empty technique parameter in technique editor (6.2 only) (#19119)

  • Fixed: Allow to put empty value in technique parameters (#19115)

  • Fixed: Inherited node properties are displayed with escape (#19085)

Web - Nodes & inventories

  • Fixed: Add an option to invert result of a node query (#19138)

  • Fixed: Search nodes component is not reloaded when reloading page, losing our current request (#19082)

  • Fixed: Inventory named as "Report" in log message (#19072)

API

  • Fixed: Clone group via API ask for query (#19129)

  • Fixed: Bad quoting for string value in parameter update from API (#19104)

  • Fixed: Add more tests for API (directives, techniques, parameters) (#19086)

  • Fixed: Missing example for server key reset (#19065)

Web - Compliance & node report

  • Fixed: Overridden directives in the same rule are missing (not even "skipped") (#19114)

Web - UI & UX

  • Fixed: Syntax helper in the parameter page is outdated (#19108)

Security

  • Fixed: Vulnerabilities in relayd hyper dependency (#18903)

Agent

  • Fixed: Typo in agent error message (#19130)

Release notes

Special thanks go out to the following individuals who invested time, patience, testing, patches or bug reports to make this version of Rudder better:

  • Lars Koenen

This is a bug fix release in the 6.2 series and therefore all installations of 6.2.x should be upgraded when possible. When we release a new version of Rudder it has been thoroughly tested, and we consider the release enterprise-ready for deployment.

Rudder 6.2.4 (2021-03-19)

Changes

Bug fixes

System integration

  • Fixed: Upgrade script fails in system technique update (empty commit) (#19044)

Web - Config management

  • Fixed: Cannot load file browser when shared-folder contains dead symlinks (#18200)

Web - UI & UX

  • Fixed: Custom bar and logo are not displayed in the login form while option is enabled in the Branding plugin (#19040)

Web - Technique editor

  • Fixed: Technique editor error when an class is not correctly defined (#19039)

Release notes

Special thanks go out to the following individuals who invested time, patience, testing, patches or bug reports to make this version of Rudder better:

  • Nicolas Ecarnot

This is a bug fix release in the 6.2 series and therefore all installations of 6.2.x should be upgraded when possible. When we release a new version of Rudder it has been thoroughly tested, and we consider the release enterprise-ready for deployment.

Rudder 6.2.3 (2021-03-18)

Release Notes

Change of behavior for empty technique parameters

Previously, when adding a new parameter to a technique in the technique editor, all directives based on this technique were still valid and used an empty value for the new parameter. This leads to unexpected behaviors, and makes adding parameters to techniques potentially dangerous.

To prevent this type of problems (in the scope of a patch release) we had to totally prevent passing empty parameters to techniques from the technique editor. This makes missing parameters a policy generation error, allowing to safely provide them to directives after modifying the source technique.

This may break existing directives that rely on an expression which evaluates to an empty value, like a property containing an empty string, or a property value with an empty default. In this case, you can pass a specific value like None or a space char to indicate an empty value, and modify the technique to handle the special case as a workaround.

We will work on a better solution in a future version, allowing to make the difference between new parameters and intentionally blank ones.

(#18832)

Policy server reload

We fixed a known issue is the way we reload the policy server (the service that distributes policies to Unix systems).

Previously, when adding a node or modifying allowed networks, a configuration reload was triggered, but it was only effective when the service became idle. On loaded Rudder servers or relays, this may totally prevent service reload, and thus prevent the new nodes from connecting.

We replaced the reload by a graceful restart mechanism which takes effect immediately. This should not cause any visible changes, except that two cf-serverd processes might be running at the same time (on handling existing connections until completion, one handling the new ones).

(#18893)

Other important fixes

  • We fixed lock issues in Rudder server logic, this should make Rudder safer and faster and thus we recommend all users to update to 6.2.3 (#18983)

  • In rare cases, the agent inventory processes could pile up, exhausting resources of the machine. This has been fixed, another important reason to update to 6.2.3 (#18832)

  • OOM exception now stops Rudder correctly with information logs either in rudder-jetty service or in webapp logs, but some JVM, especially old Java 8, still don’t log anything (#18955). As a consequence, Rudder now requires at least OpenJDK 1.8.0-92.

Changes

System integration

  • Epoch is not included in rpm package version in inventory (#19000)

Packaging

  • Update embedded openssl (#18913)

Documentation

  • Add documentation for changing cf-serverd port (#18872)

Web - Config management

  • Add a settings to delay start of policy generation (#18845)

Web - UI & UX

  • Line break after each ip address (#18883)

Techniques

  • Add an "upgrade only" option to the technique packageManagement (#18909)

Generic methods - File Management

  • Document usage of sys.ipv4 var in jinja (#18905)

Bug fixes

Packaging

  • Fixed: Upgrade failed from 5.0.20 to 6.1.9 on SLES (#18891)

System integration

  • Fixed: Fatal exception doesn’t cause rudder to stop anymore (#18955)

Server components

  • Fixed: After the promises generation, cf-serverd config may not be reloaded, preventing new nodes from connecting (#8351)

Agent

  • Fixed: Error logs about "Method '…​' failed in some repairs" are useless and should be at verbose level instead (#18914)

  • Fixed: Agent run schedule problem (#18846)

  • Fixed: Agent run schedule problem (#18846)

  • Fixed: Rudder Agent consumes complete Memory because of fdisk (#18832)

Documentation

  • Fixed: Update some plugin documentation (#18962)

  • Fixed: Add advanced jinja2 template example for main IP address (#18906)

  • Fixed: Missing licence info in pom.xml (#18978)

  • Fixed: rudder api doc doesn’t list nodes/pending (#18940)

  • Fixed: Documentation API doesn’t build anymore (#18930)

Performance and scalability

  • Fixed: We don’t know when generation hooks takes more time than expected, massively impacting generation time (#18915)

  • Fixed: A writeLock must never be in a read lock for LDAP repo (#18983)

API

  • Fixed: Inherited node properties are not returned in API (#18959)

  • Fixed: nodes API with include managementTechnologyDetails leads to error 500 response (#18926)

  • Fixed: Missing API addition for version 13 in doc (#18923)

Web - Nodes & inventories

  • Fixed: FileUploadBaseSizeLimitExceededException with an 10MB inventory (#19004)

  • Fixed: "By agent version" pie chart leads to empty page (#18791)

  • Fixed: purge software batch sometime terminate in error without log message (#18873)

Web - Config management

  • Fixed: Missing mandatory directive parameter doesn’t fail policy generation (#18995)

  • Fixed: Missing exception details in change request update (#18900)

  • Fixed: Workflow rights are not used for rules (#18876)

Containers

  • Fixed: Incorrect permission for relay docker script (#18993)

Web - UI & UX

  • Fixed: Double scrollbar in settings page when branding plugin is enabled (#18935)

  • Fixed: Error message when editing properties in the interface (#18902)

  • Fixed: Save button moves when switching of compliance reporting mode (#18849)

Miscellaneous

  • Fixed: Error in postCommit pipeline with processor 'post_commit_inventory:pending_node_for_deleted_server' (#18899)

Plugins integration

  • Fixed: Do not try to upgrade cis or openscap plugins (#18874)

System techniques

  • Fixed: Rsync command for shared-files is incorrect (#18943)

Generic methods - File Management

  • Fixed: Value replacement in "File key-value present" and "File keys-values present" methods doesn’t work correctly in some cases. (#18944)

  • Fixed: file_check_block_devices test does not work on debian based system (#18924)

Generic methods

  • Fixed: ncf unit tests do not generate any log file (#18928)

Release notes

Special thanks go out to the following individuals who invested time, patience, testing, patches or bug reports to make this version of Rudder better:

  • Anton Yakimov

  • Lars Koenen

  • Nicolas Ecarnot

  • Andras Miko

This is a bug fix release in the 6.2 series and therefore all installations of 6.2.x should be upgraded when possible. When we release a new version of Rudder it has been thoroughly tested, and we consider the release enterprise-ready for deployment.

Rudder 6.2.2 (2021-01-28)

Changes

System techniques

  • Allow defining port in policy_server.dat (#18721)

Bug fixes

Packaging

  • Fixed: Inventories are rejected due to missing dependency on Centos 8 (#18862)

System integration

  • Fixed: After upgrade between two Rudder 6.2 all plugins are disabled (#18842)

Documentation

  • Fixed: Update windows plugin documentation (#18836)

Performance and scalability

  • Fixed: Backport new inventory priorisation, software deletion API and log correction in 6.1 (#18839)

API

  • Fixed: id parameter is ignored in rule category creation API and rule tags are lost on update (#18867)

  • Fixed: Bad URL for doc of purgeSoftware API (#18840)

Web - Config management

  • Fixed: Event logs are not written when fields are set to empty (ie short description) (#18856)

Web - UI & UX

  • Fixed: Cannot open directive details on Safari (#18838)

Plugins integration

  • Fixed: rudder package upgrade-all does not upgrade each plugin independently (#18841)

  • Fixed: rudder plugin upgrade-all states that he will disable plugin, but is does not (#18843)

Release notes

This is a bug fix release in the 6.2 series and therefore all installations of 6.2.x should be upgraded when possible. When we release a new version of Rudder it has been thoroughly tested, and we consider the release enterprise-ready for deployment.

Rudder 6.2.1 (2021-01-19)

Changes

Documentation

  • Document container/docker support (#18794)

  • Mark 6.2 as final in docs (#18756)

Containers

  • Make a single container relay (#18765)

  • Make a single container relay (#18765)

API

  • Add API tests for rules (#18770)

Generic methods

  • Add solaris specific paths (#18741)

Bug fixes

Packaging

  • Fixed: package cache ignores architecture (#18759)

Documentation

  • Fixed: Add solaris to supported OS in doc (#18807)

  • Fixed: Rudder by example for auto-accept nodes (#18780)

  • Fixed: Lots of methods are missing a documentation (#18724)

Web - Maintenance

  • Fixed: Make more clear error message when several rudder.war are present (#18835)

Performance and scalability

  • Fixed: In Rudder 6.2.0 inventory processing merge_uuid part get extremely slow on debian (#12937)

API

  • Fixed: Broken API doc build (#18823)

  • Fixed: Clone rule API fails with "rule already exists with that id" (#18777)

Relay server or API

  • Fixed: Security advisories for relayd dependencies (#18824)

  • Fixed: Security vulnerability in arc-swap (#18766)

Web - Compliance & node report

  • Fixed: Error log about duplicates entries when saving node compliance levels (#18814)

Web - Nodes & inventories

  • Fixed: Accepting a node by API or UI doesn’t do the same things exactly (#18677)

  • Fixed: bad logger name for inventory processing (#18813)

  • Fixed: Node name not visible in node configuration screen (#18768)

Web - Config management

  • Fixed: Global parameters format is not preserved when editing (#18556)

  • Fixed: when directive name is long and there are several tags (like with CIS plugin), display is a bit broken (#18733)

Web - UI & UX

  • Fixed: Message on save for group must appear only when button is disabled (#18738)

  • Fixed: Markdown documentation rendering is inconsistent (#18750)

Web - Technique editor

  • Fixed: saving imported techniques with unknown GM fails with no error prompt (#18420)

Techniques

  • Fixed: Define suse classes on sled (#18775)

System techniques

  • Fixed: bootstrap policies report OK if there is no server (#18748)

  • Fixed: Jinja2 UTF-8 rendering Problem (#18552)

Generic methods

  • Fixed: head bash command path should be taken from the ncf_paths bundle (#18797)

  • Fixed: Regex constraint must not contain escaped chars (#18764)

Release notes

Special thanks go out to the following individuals who invested time, patience, testing, patches or bug reports to make this version of Rudder better:

  • Jeremy CHAMPEL

  • I C

  • Alexander Brunhirl

This is a bug fix release in the 6.2 series and therefore all installations of 6.2.x should be upgraded when possible. When we release a new version of Rudder it has been thoroughly tested, and we consider the release enterprise-ready for deployment.

Rudder 6.2.0 (2020-12-10)

Changes

Documentation

  • Add documentation about set-force-audit in audit/enforce chapter (#18707)

Bug fixes

Packaging

  • Fixed: missing python3-setuptools dependency on relay on sles15 and rhel8 (#18747)

  • Fixed: missing python3-setuptools dependency on relay on sles15 and rhel8 (#18747)

  • Fixed: Remove plugin notice during upgrade (#18742)

  • Fixed: /var/rudder/config-repo/.gitignore is overridden by packaging (#17995)

Agent

  • Fixed: backport fix on background command execution on agent (#18732)

Documentation

  • Fixed: Wrong period for health check run in user doc (#18702)

System integration

  • Fixed: No newer release compatible versions found for the plugin rudder-plugin-scale-out-relay, disabling it (#18735)

Architecture - Refactoring

  • Fixed: Compilation warning (unused variable) in 6.2.0-rc1 (#18729)

Web - UI & UX

  • Fixed: parent ticket doesn’t grey out title on accept new nodes when the popup shows up (#18691)

  • Fixed: Tooltip in node summary goes under sidebar (#18723)

  • Fixed: When there is an error after saving a directive, impossible to scroll down directive details (#18714)

  • Fixed: Create directive button is misplaced (#18700)

Web - Config management

  • Fixed: Agent run frequency must not be configurable on policy servers (#18330)

Generic methods - File Management

  • Fixed: On sles system augtool requires a terminating break line to run a command passed via pipe (#18719)

  • Fixed: calling file_key_value_present_in_ini_section on a yum repo definition loops (#18705)

Generic methods

  • Fixed: ncf uses its own cfengine port instead of rudder defined one (#18704)

Release notes

This is a bug fix release in the 6.2 series and therefore all installations of 6.2.x should be upgraded when possible. When we release a new version of Rudder it has been thoroughly tested, and we consider the release enterprise-ready for deployment.

Rudder 6.2.0.rc1 (2020-11-25)

Changes

Packaging

  • Embed augeas in the agent (#17945)

  • Add rudder-agent services to solaris package (#18444)

Documentation

  • Update documentation about node properties value inheritance rules (#18537)

  • Add a link to rudder-by-example in windows doc (#12622)

  • Fix links to different API versions (#18546)

Web - Nodes & inventories

  • Add a property column without inherited values in node list (#18641)

  • API to totally erase a node everywhere (#18035)

Web - UI & UX

  • Pretty-print json properties in nodes list (#18618)

  • Beautify Nodes page (#18424)

  • Change default columns of nodes tables (#18617)

  • Do not use italics on login page (#18606)

  • Rename Id to "Node ID" in columns name for consistency (#18603)

  • Rename node menu entries for consistency (#18590)

  • Group display: allow to see last inventory field (#7687)

  • Densify the Directives interface (#14841)

  • Add a reset columns button and some guard on localstorage cache (#18495)

  • Store columns used in localstorage in nodes list (#18476)

  • Reduce data send to nodes list and make a faster display (#18473)

Agent

  • Rudder server relay install should use the up-to-date commands and not deprecated ones (#18639)

API

  • Missing a PATCH API for allowed networks (#18508)

  • Documentation for /nodes/status page (#18483)

  • 6.2 API version is 13 (#18481)

Architecture - Internal libs

  • Skip performance test (#18563)

Architecture - Refactoring

  • Move date formatter service to a more common project (#15915)

  • Move health check API in /system/ (#18482)

Web - Maintenance

  • Skip non-standard moint FS for free-space check (#18534)

Techniques

  • deprecate the version 2.0 of the technique VariableFromJsonFiles (#14244)

Generic methods

  • Augeas methods should prefer the agent provided binary (#18600)

Bug fixes

Packaging

  • Fixed: We try to replace python shebang in source files instead of destination files (#18675)

  • Fixed: Message about replacing files during upgrade on debian like is not precise enough (#18671)

  • Fixed: Solaris package generation doesn’t follows repository tree (#18666)

  • Fixed: solaris versions only support digits (#18640)

  • Fixed: agent fails to build on aix (#18624)

  • Fixed: Solaris fails to build on 6.2 (#18614)

  • Fixed: rudder-metrics-reporting doesn’t work with 5 000 nodes (#16675)

  • Fixed: Typo in rudder package command on upgrade (#18452)

  • Fixed: Remove useless output from rudder package (#18555)

  • Fixed: Upgrading Rudder 6.2 on centos 7 fails (#18521)

Agent

  • Fixed: Fix metrics-reporting script (#18568)

System integration

  • Fixed: add software index in ldap (#18475)

  • Fixed: Force reload of generic-method cache when app starts (#18635)

Plugins integration

  • Fixed: rudder_synchronize uses the wrong API to retrieve techniques (#18421)

  • Fixed: Upgrading 6.2 nightly to 6.2 nightly with plugins fails (#18645)

  • Fixed: Link to plugins in Rudder interface should point directly to plugins list (#18658)

  • Fixed: rudder package config may not have the new parameters and may fail when reading them (#18453)

Documentation

  • Fixed: Improve documentation on disk space requirement (#18532)

  • Fixed: Search window appears behind "dev version warning" bar (#18524)

  • Fixed: Add documentation about proxy in rudder package command (#18454)

  • Fixed: Doc about "Condition from variable existence" is wrong (#18458)

Web - Technique editor

  • Fixed: Filter for name for generic methods in technique editor doesn’t filter (#18693)

  • Fixed: Code blocks in the technique editor are not rendered correctly (#18547)

Web - Compliance & node report

  • Fixed: Reporting error when using twice " File from local source" with parameter and without parameter in rudder 6.x (#18686)

  • Fixed: it’s impossible to see all technical logs in 6.2 (#18687)

  • Fixed: Popup error on group page with a readonly user in 6.2 (#18626)

Web - Nodes & inventories

  • Fixed: Inherited properties always displayed in the column, even if checkbox unchecked (#18681)

  • Fixed: If there is a lot of pending nodes, accept button is not displayed (#18680)

  • Fixed: Typo in example script for auto-accept: POSTT (#18676)

  • Fixed: [object Object] in inherited properties column (#18668)

  • Fixed: Add a script example for auto-acceptation of nodes by hook (#18634)

  • Fixed: Removing all node list columns remove the whole table (#18597)

  • Fixed: Column name to add are not sorted alphabetically (#18538)

  • Fixed: In added node attribute column, property value is never updated (#18542)

Web - UI & UX

  • Fixed: Clicking on "show docs" on a generic method scroll down too much (#18612)

  • Fixed: Many alignement issues on 6.2 (#18610)

  • Fixed: In read_only mode, many things are editable (#18627)

  • Fixed: Add line break for partition’s list in healthcheck notification (#18662)

  • Fixed: Typo in healthcheck notification title (#18661)

  • Fixed: Disable directive button has incorrect capitalization (#18601)

  • Fixed: Make group tab name capitalization consistent (#18656)

  • Fixed: Small UI features are missing from the new 6.2 interface (#18588)

  • Fixed: Column names in pending and accepted nodes are different (#18609)

  • Fixed: Improve display of partition free space (#18605)

  • Fixed: Make capitalization in directive form tabs consistent (#18604)

  • Fixed: Column label moves slightly when hovering remove button (#18594)

  • Fixed: Rename "Server" node list column to "Policy server" (#18591)

  • Fixed: missing (404) favicon in rudder loading page (#18571)

  • Fixed: Missing lights indicators in healthcheck page (#18582)

  • Fixed: Light in healthcheck notif are not displayed (#18574)

  • Fixed: Wrong timezone format of Date displayed in Recent Changes table (#18543)

  • Fixed: Display message if there are no parameters in Directive details (#11714)

  • Fixed: In Groups page, the search filter should take up the full width available (#18533)

  • Fixed: after editing columns in the group or serach node page, there’s a JS error when doing a search (#18498)

  • Fixed: Missing (404) ajax-loader.gif on node pending page (#18491)

  • Fixed: Reloading a page with a node table or refreshing breaks hostname links and compliance (#18516)

  • Fixed: spacing is uneven in reports database page (#18503)

  • Fixed: spacing is uneven in the settings page (#18501)

  • Fixed: Improve health check texts (#18477)

  • Fixed: Width of the Directive tree changes according to the selected Directive. (#18474)

  • Fixed: Compliance does not show up if you don’t click on refresh (#18462)

  • Fixed: Empty space in Directives header (#18401)

  • Fixed: Warning on plugin icon is huge on left menu (#18460)

  • Fixed: Header of some page hides menu from the left side (#18463)

  • Fixed: Health check page is not displayed (#18461)

Web - Maintenance

  • Fixed: category.xml is created in place of activeTechniqueSettings.xml in all config-repos/directives (#18499)

  • Fixed: Healthcheck checks happen to often (#18540)

  • Fixed: Healthcheck checks happen to often (#18540)

  • Fixed: Notification healthcheck is not displayed on warning (#18479)

API

  • Fixed: API ACL order is lost for users (#18664)

  • Fixed: API message when a node details is not found is extremely misleading (#18654)

  • Fixed: Bad file name in api-doc: set-allowed-networks.yml (#18608)

  • Fixed: Check parition should check the lowest space available first (#18480)

  • Fixed: Typo in API doc (#18457)

Web - Config management

  • Fixed: Added column for node property does not show inherited value (#18595)

  • Fixed: Inherited mode is not returned in API (#18578)

  • Fixed: String node properties display quotes (#18580)

  • Fixed: We don’t know which hook timeout when it happens (#18530)

  • Fixed: Inherited node prop arrays are replaced not merged contrary to doc (#18466)

  • Fixed: If a second rollback starts when a first is processing, system group/technique may be lost (#17720)

Architecture - Internal libs

  • Fixed: semaphore guarding LDAP repos are created each time (#18584)

  • Fixed: If LDAP server does not support subtree deletion, we get error when entry does not exists (#18529)

  • Fixed: ifTrace/Debug/etcIsEnabled on pure logger does nothings (#18528)

Performance and scalability

  • Fixed: Batch of new nodes can overflow rudder server with inventories (#16773)

  • Fixed: Loading directive’s page is very slow (#18510)

Relay server or API

  • Fixed: Too many open files in relayd when disk is full (#18437)

  • Fixed: Broken report parser on some info messages (#18497)

Server components

  • Fixed: Error when refusing a node (#16739)

System techniques

  • Fixed: ncf_hash_file is created with incorrect group permission by system techniques (#18592)

  • Fixed: file augeas set class parameter should be path rather than lens (#18442)

Techniques

  • Fixed: ssh key distribution techniques doesn’t accept - in user login (#18449)

Miscellaneous

  • Fixed: Update file from remote template doc (#18632)

Generic methods - File Management

  • Fixed: Create a file from remote template generic method (#18384)

  • Fixed: Flag the file_augeas_set to stagging since the method does not work as intended (#18570)

  • Fixed: File_augeas_set method does not report as expected (#18536)

  • Fixed: Document the permissions recursive and permissions type recursive methods (#18447)

  • Fixed: Permissions recursive method uses an undefined "recursion" variable in its report string (#18446)

  • Fixed: jinja templating script uses python3 even if jinja2 is not installed in python3 but is in python2 (#18416)

Generic methods

  • Fixed: variable iterator should accept whitespace as separator (#18562)

  • Fixed: variable from command does not always report an error when the command failed (#18512)

  • Fixed: when sum of length of parameter is larger than 1000 characters, reporting leaks too much from one method to another (#18505)

  • Fixed: techniques in audit don’t report correctly for editing values in files (#18451)

  • Fixed: Jinja2 templating fails with python 3 with unicode data (#18441)

Release notes

Special thanks go out to the following individuals who invested time, patience, testing, patches or bug reports to make this version of Rudder better:

  • Florian Heigl

This is a bug fix release in the 6.2 series and therefore all installations of 6.2.x should be upgraded when possible. When we release a new version of Rudder it has been thoroughly tested, and we consider the release enterprise-ready for deployment.

Rudder 6.2.0.beta1 (2020-10-29)

Changes

Packaging

  • Update dependencies for Rudder (#18392)

Documentation

  • Document Health Check in user doc (#18350)

Web - Compliance & node report

  • Make fields of node list customizable (#7967)

Miscellaneous

  • Add check for File Descriptor limit (#18414)

  • Add check for free space (#18357)

Web - UI & UX

  • Beautify Global Parameters page (#18418)

  • Healthcheck notification in navigation bar (#18328)

  • Create Healthcheck webpage (#18314)

  • Beautify API accounts page (#18389)

  • Beautify Reports database page (#18388)

  • Beautify Event logs page (#18366)

  • Update settings UI (#18263)

  • Merge ncf editor into Rudder (#18262)

  • Add a shortcut to create directive with latest technique version from the tree (#18164)

  • Make the filter section of the directives tree foldable (#18157)

  • Use new UI template in Directives page (#18076)

API

  • Node status API must not return an error when the node is not here (#17666)

  • Add check name in healthcheck API (#18363)

  • Create healthcheck API (#18306)

Architecture - Dependencies

  • Update dependencies for the webapp (#18395)

Relay server or API

  • Update relayd dependencies (#18393)

Techniques

  • Implement ips package repositories technique (#18434)

  • Create an "old-school" crontab technique to manage crontab in /var/spool/cron/crontabs (#18228)

Generic methods

  • Do not fix component key in generic methods reporting (#18433)

Generic methods - Package Management

  • Add solaris package support to ncf (#18243)

Bug fixes

Packaging

  • Fixed: Version rudder-api-client like Rudder on RPM (#18435)

Plugins integration

  • Fixed: All plugins are disabled after a minor upgrade (#17878)

Documentation

  • Fixed: Prepare doc for 6.2 (#18368)

  • Fixed: Broken ncf doc build (#18369)

Architecture - Refactoring

  • Fixed: Fix compilation issues after merge (#18443)

Architecture - Dependencies

  • Fixed: Update to scala 2.13.3 (#18425)

Miscellaneous

  • Fixed: Missing RudderConfig parameter pour healthcheck period (#18413)

Web - Nodes & inventories

  • Fixed: Create hooks for when a node inventory is received (#18379)

  • Fixed: Support source package in Rudder inventory (#18317)

Server components

  • Fixed: Group owner of files under configuration-repository are inconsistent (#18347)

  • Fixed: Rudder SSL default configuration should follow the system default one (#18338)

Relay server or API

  • Fixed: Handle proxies in rudder package command (#18326)

  • Fixed: Handle proxies in rudder package command (#18326)

  • Fixed: Handle proxies in rudder package command (#18326)

  • Fixed: Handle proxies in rudder package command (#18326)

  • Fixed: Handle proxies in rudder package command (#18326)

Technique editor - API

  • Fixed: Technique editor doesn’t use context path for API call (#18374)

Web - UI & UX

  • Fixed: Beautify Archives page (#18365)

  • Fixed: In the Technique Editor, tooltips no longer appear. (#18334)

  • Fixed: Some page sections blink while the Technique Editor is loading (#18329)

  • Fixed: Replace old notifications by those of Rudder (#18324)

Web - Config management

  • Fixed: Stop parsing os/agent from technique metadata (#18340)

Performance and scalability

  • Fixed: Unused index on table Ruddersysevents (#18110)

System techniques

  • Fixed: Cron for Rudder agent on solaris is invalid (#18231)

Generic methods - Package Management

  • Fixed: implement nim package manager (#18313)

Release notes

Special thanks go out to the following individuals who invested time, patience, testing, patches or bug reports to make this version of Rudder better:

  • Janos Mattyasovszky

This is a bug fix release in the 6.2 series and therefore all installations of 6.2.x should be upgraded when possible. When we release a new version of Rudder it has been thoroughly tested, and we consider the release enterprise-ready for deployment.

This page provides a summary of changes for each version.